4 matches found
letmein 安全漏洞
letmein is a port authentication tool by the individual developer Michael Büsch. A security vulnerability exists in versions prior to letmein 10.2.1, which stems from an improper implementation of the connection limiter and could result in an arbitrary number of simultaneous connections...
PT-2024-34662 · Cobalt · Cobalt
Name of the Vulnerable Software and Affected Versions: cobalt versions prior to 10.2.1 Description: A malicious cobalt instance could serve links with the javascript: protocol, resulting in Cross-site Scripting XSS when the user tries to download an item from a picker. This issue has been present...
Sharetribe Go 操作系统命令注入漏洞
Sharetribe Go is a source-available marketplace software from the Sharetribe team. An OS command injection vulnerability exists in versions of Sharetribe Go prior to 10.2.1, users who are unable to upgrade should set the snsnotificationtoken configuration parameter to a confidential value...
IceWarp Mail Server Cross-Site Scripting Vulnerability (CNVD-2019-36913)
IceWarp Mail Server is a mail server product from IceWarp USA. The product supports e-mail archiving, SmartAttach attachments, automatic migration, etc. IceWarp Webclient is a Web-based IceWarp client program. A cross-site scripting vulnerability exists in IceWarp Webclient versions prior to...